Unrated severityNVD Advisory· Published Jan 28, 2026· Updated Mar 5, 2026
M/Monit 3.7.4 - Privilege Escalation
CVE-2020-36969
Description
M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standard user account.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=3.7.4
- Tildeslash Ltd./M/Monitv5Range: 3.7.4
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/49080mitreexploit
- www.vulncheck.com/advisories/mmonit-privilege-escalationmitrethird-party-advisory
- mmonit.commitreproduct
News mentions
0No linked articles in our index yet.